Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
File: 8b56caea-2136-4342-baff-6f31268d4cc4.cer (raw, json)
Hash identifier: Nq5On4yNl+VAaVFMtC4sBE/p+rDe7o/ABA1BUecnk3I=
Subject key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285848A55E7119182236F5EEF4B500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 24 Jan 2025 01:45:33 +0000
Certificate not after: Thu 29 Apr 2027 00:45:33 +0000
Subordinate resources: IP: 23.146.24.0/24
IP: 140.235.4.0/22
IP: 2602:faaf::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:5e:71:19:18:22:36:f5:ee:f4:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jan 24 01:45:33 2025 GMT
Not After : Apr 29 00:45:33 2027 GMT
Subject: CN=8b56caea-2136-4342-baff-6f31268d4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:d1:4d:5a:d2:d9:d1:ea:e6:2b:64:4c:8f:
80:9b:a6:6e:d6:b9:27:a7:3d:e0:d9:94:84:1c:ef:
5c:af:26:c8:6d:20:f8:28:c8:24:01:2e:a0:59:e5:
82:9c:61:ea:94:2b:e0:30:c6:9d:5d:a7:1f:84:ad:
65:4b:86:8e:37:c6:ec:62:ba:3f:91:86:8e:e8:6a:
ab:95:67:0d:f7:3c:34:57:2c:83:6d:80:19:80:5b:
fb:6e:2c:d6:8f:c8:93:1f:0e:80:15:3c:52:1d:9b:
21:d2:2b:d6:69:3e:68:8d:a7:b7:5a:27:17:ed:5e:
8e:f8:6a:14:25:2b:fa:68:78:97:d0:24:45:94:42:
f7:26:a0:94:50:f6:71:42:30:12:86:fa:71:dc:50:
55:84:36:41:6b:fb:c1:ac:a7:40:97:96:68:7b:7a:
cf:63:c5:ef:f1:87:ac:67:60:b6:15:4d:78:df:55:
70:60:31:ca:3f:25:ae:ae:8b:46:5c:94:7d:69:c3:
31:3b:20:1e:e1:dd:00:31:38:7f:52:5f:8b:f3:c3:
09:e4:5a:a1:33:e0:36:5c:81:1e:ce:84:92:fb:20:
ed:e1:f3:0b:af:c2:59:65:dc:54:15:a7:db:99:9c:
17:aa:ae:0c:fc:f8:fa:81:d5:f5:ce:12:da:aa:df:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.24.0/24
140.235.4.0/22
IPv6:
2602:faaf::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:cd:cb:6e:e9:28:2b:1b:c7:b8:cc:d8:ad:08:01:db:f3:d0:
1d:3a:99:6c:53:7f:a8:31:b7:23:8b:b8:91:60:07:d4:2b:46:
df:9d:c7:7f:ed:ce:5e:70:56:c7:f3:0c:f5:2f:f7:07:9f:15:
38:1a:a3:1c:87:a4:c6:be:8a:69:db:08:4d:a0:bf:56:66:b2:
49:22:5d:e2:71:0a:ee:db:86:73:bc:97:cd:ba:ac:68:a8:f8:
b6:3b:52:24:68:c1:07:c3:66:31:99:ef:bd:ab:c2:be:d7:7f:
69:0b:ef:86:70:25:53:54:90:ce:f9:96:ad:c9:34:bd:7b:36:
f8:4b:a5:73:7d:16:84:57:7d:6f:c3:d8:43:30:80:0f:9e:66:
75:c1:da:63:c8:47:08:b9:de:1a:72:65:ee:bd:84:09:81:99:
3e:73:e2:a5:20:8a:e4:81:54:7b:dd:69:01:af:ac:37:be:50:
0c:f2:5e:65:cd:9a:27:7a:41:82:bf:19:59:23:38:cb:4e:8e:
b7:ae:ae:d3:9a:e7:dc:a8:c0:4a:90:c9:d0:36:db:ff:7f:4a:
a0:fa:3f:e0:b4:8a:46:e9:af:08:34:50:63:ac:58:61:45:67:
8e:d7:0a:f7:d4:4a:48:84:0b:ac:16:3b:e3:b9:d9:c9:af:f0:
4b:fd:42:9b
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEilXnEZGCI29e70tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MDEyNDAxNDUzM1oXDTI3MDQyOTAwNDUzM1owLzEtMCsGA1UEAxMk
OGI1NmNhZWEtMjEzNi00MzQyLWJhZmYtNmYzMTI2OGQ0Y2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvRTVrS2dHq5itkTI+Am6Zu1rknpz3g2ZSE
HO9crybIbSD4KMgkAS6gWeWCnGHqlCvgMMadXacfhK1lS4aON8bsYro/kYaO6Gqr
lWcN9zw0VyyDbYAZgFv7bizWj8iTHw6AFTxSHZsh0ivWaT5ojae3WicX7V6O+GoU
JSv6aHiX0CRFlEL3JqCUUPZxQjAShvpx3FBVhDZBa/vBrKdAl5Zoe3rPY8Xv8Yes
Z2C2FU1431VwYDHKPyWurotGXJR9acMxOyAe4d0AMTh/Ul+L88MJ5FqhM+A2XIEe
zoSS+yDt4fMLr8JZZdxUFafbmZwXqq4M/Pj6gdX1zhLaqt/vswIDAQABo4IEFTCC
BBEwHQYDVR0OBBYEFFuUaT0IzkiCFeY5lnEhIw2QqMPdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84
YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4ZDRjYzQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhiNTZjYWVhLTIxMzYtNDM0Mi1i
YWZmLTZmMzEyNjhkNGNjNC84YjU2Y2FlYS0yMTM2LTQzNDItYmFmZi02ZjMxMjY4
ZDRjYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXkhgDBAKM6wQwDgQCAAIwCAMGACYC+q8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnNy27pKCsbx7jM2K0IAdvz0B06mWxTf6gxtyOLuJFgB9QrRt+dx3/t
zl5wVsfzDPUv9wefFTgaoxyHpMa+imnbCE2gv1ZmskkiXeJxCu7bhnO8l826rGio
+LY7UiRowQfDZjGZ772rwr7Xf2kL74ZwJVNUkM75lq3JNL17NvhLpXN9FoRXfW/D
2EMwgA+eZnXB2mPIRwi53hpyZe69hAmBmT5z4qUgiuSBVHvdaQGvrDe+UAzyXmXN
mid6QYK/GVkjOMtOjreurtOa59yowEqQydA22/9/SqD6P+C0ikbprwg0UGOsWGFF
Z47XCvfUSkiEC6wWO+O52cmv8Ev9Qps=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:37 2025 by rpki-client